[gt-user] "" is not authorized to use operation

Thu, 24 Sep 2009 07:27:50 -0700 

Dear all,
I am trying to implement a generic Axis Client that is capable to communicate with Globus 4.0.8. 
(Takes a message as xml string and sends it to the Globus Server)
As test, I try to create a new Counter Service instance. This works fine when using GSI_TRANSPORT and the ConterService but fails when using the SecureCounterService with GSI_SEC_MSG or GSI_SEC_CONV, sending the same message but reconfiguring the Axis Call object before invoking the service: 
as examples:
call.setProperty(Constants.AUTHORIZATION, authorisation);
call.setProperty(Constants.GSI_SEC_CONV, level);
GlobusCredential globusCredential = new GlobusCredential("/home/ahoeing/proxy.pem"); GSSCredential proxy = new GlobusGSSCredentialImpl(globusCredential, GSSCredential.INITIATE_AND_ACCEPT); 
call.setProperty(GSIConstants.GSI_CREDENTIALS, proxy);
log.warn("Using proxy certificate " + proxy.getName());

The server returns the following error:
"<anonymous>" is not authorized to use operation: {http://counter.com}createCounter on this service 

My ClientHandlerChain requestFlow is:
<requestFlow>
<handler type="java:org.globus.wsrf.impl.security.authentication.ClientPropertiesHandler" />--> 
           <handler type="java:org.apache.axis.handlers.JAXRPCHandler">
<parameter name="className" value="org.globus.wsrf.impl.security.authentication.securemsg.X509EncryptHandler" /> 
           </handler>
           <handler type="java:org.apache.axis.handlers.JAXRPCHandler">
<parameter name="className" value="org.globus.wsrf.impl.security.authentication.securemsg.X509SignHandler" /> 
           </handler>
           <handler type="java:org.apache.axis.handlers.JAXRPCHandler">
<parameter name="className" value="org.globus.wsrf.impl.security.authentication.UsernameHandler" /> 
           </handler>
           <handler type="java:org.apache.axis.handlers.JAXRPCHandler">
               <parameter name="authService" value="auto" />
<parameter name="className" value="org.globus.wsrf.impl.security.authentication.secureconv.SecContextHandler" /> 
           </handler>
           <handler type="java:org.apache.axis.handlers.JAXRPCHandler">
<parameter name="className" value="org.globus.wsrf.impl.security.authentication.secureconv.GSSHandler" /> 
           </handler>
           <handler type="java:org.apache.axis.handlers.JAXRPCHandler">
<parameter name="className" value="org.globus.wsrf.impl.security.authorization.TrustedTargetHandler" /> 
           </handler>
<handler type="java:org.globus.wsrf.handlers.MessageLoggingHandler" /> <handler type="java:org.apache.axis.handlers.SOAPMonitorHandler" /> 
       </requestFlow>

Does somebody know what I am doing wrong?

Thanks for the help and best regards,
André

--

André Höing

Technische Universitaet Berlin
Faculty of Electrical Engineering and Computer Science
Department of Telecommunication Systems
Complex and Distributed IT Systems

Secr. EN 59
Einsteinufer 17
10587 Berlin

Phone: +49 30  314 78946
Fax:   +49 30  314 21114
e-mail: [email protected]

WWW: http://www.cit.tu-berlin.de/


2009-09-24 16:00:37,017 [main] WARN  AxisMessageSender - Using Authorization: 
org.globus.wsrf.impl.security.authorization.NoAuthorization
2009-09-24 16:00:37,019 [main] WARN  AxisMessageSender - Using WS-Secure 
Conversation with protection level 1
2009-09-24 16:00:37,019 [main] WARN  AxisMessageSender - Delegation is set to 
NONE
2009-09-24 16:00:37,424 [main] WARN  AxisMessageSender - Using proxy 
certificate 
/O=Grid/OU=GlobusTest/OU=simpleCA-bisgrid-globus.cit.tu-berlin.de/OU=cit.tu-berlin.de/CN=Globus
 User
2009-09-24 16:00:37,474 [main] DEBUG SecContextHandler - Enter: constructor
2009-09-24 16:00:37,487 [main] DEBUG X509SignHandler - Signature not requested. 
null
2009-09-24 16:00:37,487 [main] DEBUG UsernameHandler - User name is not set
2009-09-24 16:00:37,487 [main] DEBUG SecContextHandler - Enter: invoke
2009-09-24 16:00:37,487 [main] DEBUG SecContextHandler - Establishing new 
context
2009-09-24 16:00:37,522 [main] DEBUG SecContextHandler - Endpoint address is 
https://bisgrid-globus.cit.tu-berlin.de:8443/wsrf/services/SecureCounterService-authService
2009-09-24 16:00:37,645 [main] DEBUG SecContextHandler - Lifetime is 0
2009-09-24 16:00:37,648 [main] DEBUG SecContextHandler - Authz is 
org.globus.wsrf.impl.security.authorization.NoAuthorization
2009-09-24 16:00:37,656 [main] DEBUG SecContextHandler - Delegation mode: gsi
2009-09-24 16:00:37,918 [main] DEBUG SecContextHandler - Enter: constructor
2009-09-24 16:00:37,918 [main] DEBUG X509SignHandler - Signature not requested. 
null
2009-09-24 16:00:37,918 [main] DEBUG UsernameHandler - User name is not set
2009-09-24 16:00:37,918 [main] DEBUG SecContextHandler - Enter: invoke
2009-09-24 16:00:37,919 [main] DEBUG SecContextHandler - Exit: invoke
2009-09-24 16:00:37,919 [main] DEBUG GSSHandler - Enter: secure
2009-09-24 16:00:37,919 [main] DEBUG GSSHandler - Request msgSecType null
2009-09-24 16:00:37,919 [main] DEBUG GSSHandler - No msg security type set.
2009-09-24 16:00:37,932 [main] DEBUG MessageLoggingHandler - SOAPEnvelope: 
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"; 
xmlns:xsd="http://www.w3.org/2001/XMLSchema"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";><soapenv:Body><RequestSecurityToken
 
xmlns="http://schemas.xmlsoap.org/ws/2004/04/trust";><RequestType>http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><TokenType>http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct</TokenType><BinaryExchange
 
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
 
ValueType="http://www.globus.org/ws/2004/09/security/sc#GSSAPI_GSI_TOKEN";>FgMAADsBAAA3AwBKu3uFyq7985tZcPxn7eVgyC8s+Pzq+rPYN1nsI+9b1AAAEAAKAAUABAATAGYACQASAAEBAA==</BinaryExchange></RequestSecurityToken></soapenv:Body></soapenv:Envelope>
2009-09-24 16:00:39,198 [main] DEBUG MessageLoggingHandler - SOAPEnvelope: 
<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"; 
xmlns:xsd="http://www.w3.org/2001/XMLSchema"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";><soapenv:Body><RequestSecurityTokenResponse
 Context="uuid:a3e3bbd0-a912-11de-b6d4-83180e5f4b34" 
xmlns="http://schemas.xmlsoap.org/ws/2004/04/trust";><RequestType>http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><TokenType>http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct</TokenType><BinaryExchange
 
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
 
ValueType="http://www.globus.org/ws/2004/09/security/sc#GSSAPI_GSI_TOKEN";>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</BinaryExchange></RequestSecurityTokenResponse></soapenv:Body></soapenv:Envelope>
2009-09-24 16:00:39,310 [main] DEBUG X509SignHandler - Signature not requested. 
null
2009-09-24 16:00:39,310 [main] DEBUG UsernameHandler - User name is not set
2009-09-24 16:00:39,310 [main] DEBUG SecContextHandler - Enter: invoke
2009-09-24 16:00:39,310 [main] DEBUG SecContextHandler - Exit: invoke
2009-09-24 16:00:39,310 [main] DEBUG GSSHandler - Enter: secure
2009-09-24 16:00:39,310 [main] DEBUG GSSHandler - Request msgSecType null
2009-09-24 16:00:39,311 [main] DEBUG GSSHandler - No msg security type set.
2009-09-24 16:00:39,311 [main] DEBUG MessageLoggingHandler - SOAPEnvelope: 
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"; 
xmlns:xsd="http://www.w3.org/2001/XMLSchema"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";><soapenv:Body><RequestSecurityTokenResponse
 Context="uuid:a3e3bbd0-a912-11de-b6d4-83180e5f4b34" 
xmlns="http://schemas.xmlsoap.org/ws/2004/04/trust";><RequestType>http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><TokenType>http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct</TokenType><BinaryExchange
 
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
 
ValueType="http://www.globus.org/ws/2004/09/security/sc#GSSAPI_GSI_TOKEN";>FgMABRoLAAUWAAUTAAKDMIICfzCCAeigAwIBAgIETWTFODANBgkqhkiG9w0BAQQFADCBiDENMAsGA1UEChMER3JpZDETMBEGA1UECxMKR2xvYnVzVGVzdDExMC8GA1UECxMoc2ltcGxlQ0EtYmlzZ3JpZC1nbG9idXMuY2l0LnR1LWJlcmxpbi5kZTEZMBcGA1UECxMQY2l0LnR1LWJlcmxpbi5kZTEUMBIGA1UEAxMLR2xvYnVzIFVzZXIwHhcNMDkwOTIxMTAyNTE4WhcNMDkxMTAyMDIzMDE4WjCBnTENMAsGA1UEChMER3JpZDETMBEGA1UECxMKR2xvYnVzVGVzdDExMC8GA1UECxMoc2ltcGxlQ0EtYmlzZ3JpZC1nbG9idXMuY2l0LnR1LWJlcmxpbi5kZTEZMBcGA1UECxMQY2l0LnR1LWJlcmxpbi5kZTEUMBIGA1UEAxMLR2xvYnVzIFVzZXIxEzARBgNVBAMTCjEyOTg0NDk3MjAwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAleqY8A24/g+xhTtpxbFpf8HD7VQPmFCViPRFNuXfcPAwwyLCgQpkTyBymOZ8RGRAJ6gs8Oj1QrUtJFFtDOwHOwIDAQABoyMwITAfBgorBgEEAZtQAYFeAQH/BA4wDDAKBggrBgEFBQcVATANBgkqhkiG9w0BAQQFAAOBgQBqU68C4/7rCOlNitVU+SD4rJeam1VfN9xyL2OSd2uyHcJ8jMow1OMrlhMwYk+NM6ETamLfxua596BfYXvdnAQKUln3/I+5alxAGle50DSd1ISQ8JkKbB094jEiQPWaeatlbq/w9ilccWZ1bRCu6olA4AJE+Wg4R3AAc81JJ9Yd8wACijCCAoYwggHvoAMCAQICAQIwDQYJKoZIhvcNAQEEBQAwcjENMAsGA1UEChMER3JpZDETMBEGA1UECxMKR2xvYnVzVGVzdDExMC8GA1UECxMoc2ltcGxlQ0EtYmlzZ3JpZC1nbG9idXMuY2l0LnR1LWJlcmxpbi5kZTEZMBcGA1UEAxMQR2xvYnVzIFNpbXBsZSBDQTAeFw0wOTA5MDQxNzIwMDRaFw0xMDA5MDQxNzIwMDRaMIGIMQ0wCwYDVQQKEwRHcmlkMRMwEQYDVQQLEwpHbG9idXNUZXN0MTEwLwYDVQQLEyhzaW1wbGVDQS1iaXNncmlkLWdsb2J1cy5jaXQudHUtYmVybGluLmRlMRkwFwYDVQQLExBjaXQudHUtYmVybGluLmRlMRQwEgYDVQQDEwtHbG9idXMgVXNlcjCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAr2dmaf0QlB9cZEV1upIHkVrCgWjxt3R16/nRYlOdDIPSck3fSpxpkt0fZi9mUNgLo0aZGaOW80ssoL+yoC8S1LSLJiVBjaJpHKPT24dii5KWej3gzctjNi/oXambSM2KV3g2+W4PHeomQWYrv460pZK7o3O6dyuD7/TMEQkUwXkCAwEAAaMVMBMwEQYJYIZIAYb4QgEBBAQDAgTwMA0GCSqGSIb3DQEBBAUAA4GBALyDNB88p/FGcVYGFQ03h2loE6HzaIwb8wue4rD4GZruN7HRpEu8Uyly9n1WES+W1n8QEDteoomGFP4Pw4+HZ0y1ODBtipR2FFbrRaFp8EPj5YkepJFFTd9Uj7oyIxZ0BuRDVu9vLINP7RrNbdKafeWusMi6snBQd7jsC704YTDMFgMAAIQQAACAcSj4bLG7iSSSAQTwbKyObZ9KKchIuNaTCLoz5fo3X3jOTuChGw9dnJ3RcAZBmxPUrWy33s5K6kGggkU/UJBrQGtALcaDAcGPlQBs4EI7OJ1eJAeExmm15QY8fEt8bf2N2lksvVCB0HABYSOW3lVf9THjY3DHfYSz4webXqZd3/4WAwAARg8AAEIAQEcFFnqRqIx+f19aduxz+9/91REAlTqH0vQQbfmHemt41r7ApO2ADZf2/qCeSRJk23+/EVK/Y2TK7uR6jTPtaTsUAwAAAQEWAwAAQDTrwNkdwVBhUXNcKyjNrS354uqXgnkstVmA2YRhcm43elIoaCdEdk92Q39ADsjsmnpx64+vIqmfryVO/a2V/P0=</BinaryExchange></RequestSecurityTokenResponse></soapenv:Body></soapenv:Envelope>
2009-09-24 16:00:39,392 [main] DEBUG MessageLoggingHandler - SOAPEnvelope: 
<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"; 
xmlns:xsd="http://www.w3.org/2001/XMLSchema"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";><soapenv:Body><RequestSecurityTokenResponse
 Context="uuid:a3e3bbd0-a912-11de-b6d4-83180e5f4b34" 
xmlns="http://schemas.xmlsoap.org/ws/2004/04/trust";><RequestType>http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><TokenType>http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct</TokenType><BinaryExchange
 
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
 
ValueType="http://www.globus.org/ws/2004/09/security/sc#GSSAPI_GSI_TOKEN";>FAMAAAEBFgMAAECvz6wOI0ZMFJgOv5eHK8DjRxeqYsf2vS8MlkayjLdChYIzKto/DmDyE13dMzxurE0y2QqKEfi7LwWtobHMfEzg</BinaryExchange></RequestSecurityTokenResponse></soapenv:Body></soapenv:Envelope>
2009-09-24 16:00:39,407 [main] DEBUG X509SignHandler - Signature not requested. 
null
2009-09-24 16:00:39,407 [main] DEBUG UsernameHandler - User name is not set
2009-09-24 16:00:39,407 [main] DEBUG SecContextHandler - Enter: invoke
2009-09-24 16:00:39,407 [main] DEBUG SecContextHandler - Exit: invoke
2009-09-24 16:00:39,407 [main] DEBUG GSSHandler - Enter: secure
2009-09-24 16:00:39,407 [main] DEBUG GSSHandler - Request msgSecType null
2009-09-24 16:00:39,407 [main] DEBUG GSSHandler - No msg security type set.
2009-09-24 16:00:39,407 [main] DEBUG MessageLoggingHandler - SOAPEnvelope: 
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"; 
xmlns:xsd="http://www.w3.org/2001/XMLSchema"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";><soapenv:Body><RequestSecurityTokenResponse
 Context="uuid:a3e3bbd0-a912-11de-b6d4-83180e5f4b34" 
xmlns="http://schemas.xmlsoap.org/ws/2004/04/trust";><RequestType>http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><TokenType>http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct</TokenType><BinaryExchange
 
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
 
ValueType="http://www.globus.org/ws/2004/09/security/sc#GSSAPI_GSI_TOKEN";>FwMAABgFra0iiLUnonW8Jyr81Ojl2fk+ZFe+D+0=</BinaryExchange></RequestSecurityTokenResponse></soapenv:Body></soapenv:Envelope>
2009-09-24 16:00:39,574 [main] DEBUG MessageLoggingHandler - SOAPEnvelope: 
<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"; 
xmlns:xsd="http://www.w3.org/2001/XMLSchema"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";><soapenv:Body><RequestSecurityTokenResponse
 Context="uuid:a3e3bbd0-a912-11de-b6d4-83180e5f4b34" 
xmlns="http://schemas.xmlsoap.org/ws/2004/04/trust";><RequestType>http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><TokenType>http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct</TokenType><ns1:SecurityContextToken
 
xmlns:ns1="http://schemas.xmlsoap.org/ws/2004/04/sc";><ns1:Identifier>uuid:a3e3bbd0-a912-11de-b6d4-83180e5f4b34</ns1:Identifier><ns2:ContextAddress
 xmlns:ns2="http://wsrf.globus.org/core/2004/07/security/secconv";><ns3:Address 
xmlns:ns3="http://schemas.xmlsoap.org/ws/2004/03/addressing";>https://130.149.3.79:8443/wsrf/services/SecureCounterService-authService</ns3:Address><ns4:ReferenceProperties
 
xmlns:ns4="http://schemas.xmlsoap.org/ws/2004/03/addressing";><ns5:SecureContextKey
 
xmlns:ns5="http://www.globus.org/namespaces/2004/06/core";>a3e3bbd0-a912-11de-b6d4-83180e5f4b34</ns5:SecureContextKey></ns4:ReferenceProperties><ns6:ReferenceParameters
 
xmlns:ns6="http://schemas.xmlsoap.org/ws/2004/03/addressing"/></ns2:ContextAddress></ns1:SecurityContextToken></RequestSecurityTokenResponse></soapenv:Body></soapenv:Envelope>
2009-09-24 16:00:39,580 [main] DEBUG SecContextHandler - Context established
2009-09-24 16:00:39,581 [main] DEBUG SecContextHandler - Exit: invoke
2009-09-24 16:00:39,581 [main] DEBUG GSSHandler - Enter: secure
2009-09-24 16:00:39,581 [main] DEBUG GSSHandler - Request msgSecType 1
2009-09-24 16:00:39,582 [main] DEBUG SignHandler - Enter: sign
2009-09-24 16:00:39,652 [main] FATAL Init - No message with ID 
"algorithm.classDoesNotExist" found in resource bundle 
"org/apache/xml/security/resource/xmlsecurity"
2009-09-24 16:00:39,665 [main] FATAL Init - No message with ID 
"algorithm.classDoesNotExist" found in resource bundle 
"org/apache/xml/security/resource/xmlsecurity"
2009-09-24 16:00:39,667 [main] FATAL Init - No message with ID 
"algorithm.classDoesNotExist" found in resource bundle 
"org/apache/xml/security/resource/xmlsecurity"
2009-09-24 16:00:39,711 [main] DEBUG GssSignedSOAPEnvelopeBuilder - Beginning 
signing...
2009-09-24 16:00:39,737 [main] DEBUG SignatureGSS - Created SignatureGSS using 
GSSAPI
2009-09-24 16:00:39,759 [main] DEBUG GssSignedSOAPEnvelopeBuilder - Signing 
complete.
2009-09-24 16:00:39,761 [main] DEBUG SignHandler - Exit: sign
2009-09-24 16:00:39,762 [main] DEBUG GSSHandler - Exit: secure
2009-09-24 16:00:39,766 [main] DEBUG MessageLoggingHandler - SOAPEnvelope: 
<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"; 
xmlns:xsd="http://www.w3.org/2001/XMLSchema"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";><soapenv:Header>
<wsse:Security soapenv:mustUnderstand="1" 
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";><ds:Signature
 xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
<ds:SignedInfo>
<ds:CanonicalizationMethod 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces 
PrefixList="soapenv xsd xsi" 
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:CanonicalizationMethod>
<ds:SignatureMethod 
Algorithm="http://www.globus.org/2002/04/xmlenc#gssapi-sign"/>
<ds:Reference URI="#id-393689620">
<ds:Transforms>
<ds:Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces 
PrefixList="xsd xsi" 
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ds:DigestValue>HG8+7nB5TYTqan0DGlSaMLRtblc=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>AAAAAAAAAAIAAANWXNzUcMtnf1oSY9+gsZHDCKriKNM=</ds:SignatureValue>
<ds:KeyInfo>
<wsse:SecurityTokenReference><wsse:Reference 
URI="#SecurityContextToken-1554270688" 
ValueType="http://www.globus.org/ws/2004/09/security/sc#GSSAPI_CONTEXT_TOKEN"/></wsse:SecurityTokenReference>
</ds:KeyInfo>
</ds:Signature><wsc:SecurityContextToken 
wsu:Id="SecurityContextToken-1554270688" 
xmlns:wsc="http://schemas.xmlsoap.org/ws/2004/04/sc"; 
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";><wsc:Identifier>a3e3bbd0-a912-11de-b6d4-83180e5f4b34</wsc:Identifier></wsc:SecurityContextToken></wsse:Security><wsa:Action
 soapenv:actor="" soapenv:mustUnderstand="0" 
xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/03/addressing";>http://counter.com/CounterPortType/createCounterRequest</wsa:Action><wsa:To
 soapenv:actor="" soapenv:mustUnderstand="0" 
xmlns:wsa="http://www.w3.org/2005/08/addressing";>https://bisgrid-globus.cit.tu-berlin.de:8443/wsrf/services/SecureCounterService</wsa:To><wsa:FaultTo
 soapenv:actor="" soapenv:mustUnderstand="0" 
xmlns:wsa="http://www.w3.org/2005/08/addressing";><wsa:Address>http://www.w3.org/2005/08/addressing/anonymous</wsa:Address></wsa:FaultTo><wsa:From
 soapenv:actor="" soapenv:mustUnderstand="0" 
xmlns:wsa="http://www.w3.org/2005/08/addressing";><wsa:Address>http://www.w3.org/2005/08/addressing/anonymous</wsa:Address></wsa:From><wsa:MessageID
 soapenv:actor="" soapenv:mustUnderstand="0" 
xmlns:wsa="http://www.w3.org/2005/08/addressing";>urn:uuid:F0B6BDA5-C17A-DDD3-42A8-844CDEF019FB</wsa:MessageID><wsa:ReplyTo
 soapenv:actor="" soapenv:mustUnderstand="0" 
xmlns:wsa="http://www.w3.org/2005/08/addressing";><wsa:Address>http://www.w3.org/2005/08/addressing/anonymous</wsa:Address></wsa:ReplyTo></soapenv:Header><soapenv:Body
 wsu:Id="id-393689620" 
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";><ns0:createCounter
 xmlns:ns0="http://counter.com"/></soapenv:Body></soapenv:Envelope>
2009-09-24 16:00:39,853 [main] DEBUG MessageLoggingHandler - SOAPEnvelope: 
<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"; 
xmlns:xsd="http://www.w3.org/2001/XMLSchema"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";><soapenv:Body><soapenv:Fault><faultcode>soapenv:Server.userException</faultcode><faultstring>org.globus.wsrf.impl.security.authorization.exceptions.AuthorizationException:
 &quot;&lt;anonymous&gt;&quot; is not authorized to use operation: 
{http://counter.com}createCounter on this 
service</faultstring><detail><ns1:stackTrace 
xmlns:ns1="http://xml.apache.org/axis/";>org.globus.wsrf.impl.security.authorization.exceptions.AuthorizationException:
 &quot;&lt;anonymous&gt;&quot; is not authorized to use operation: 
{http://counter.com}createCounter on this service
        at 
org.globus.wsrf.impl.security.authorization.ServiceAuthorizationChain.authorize(ServiceAuthorizationChain.java:301)
        at 
org.globus.wsrf.impl.security.authorization.ServiceAuthorizationChain.authorize(ServiceAuthorizationChain.java:272)
        at 
org.globus.wsrf.impl.security.authorization.ServiceAuthorizationChain.authorize(ServiceAuthorizationChain.java:235)
        at 
org.globus.wsrf.impl.security.authorization.AuthorizationHandler.invoke(AuthorizationHandler.java:177)
        at 
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
        at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
        at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
        at org.apache.axis.server.AxisServer.invoke(AxisServer.java:248)
        at 
org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:664)
        at 
org.globus.wsrf.container.ServiceThread.process(ServiceThread.java:382)
        at 
org.globus.wsrf.container.GSIServiceThread.process(GSIServiceThread.java:153)
        at org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:291)
</ns1:stackTrace><ns2:hostname 
xmlns:ns2="http://xml.apache.org/axis/";>bisgrid-globus</ns2:hostname></detail></soapenv:Fault></soapenv:Body></soapenv:Envelope>
2009-09-24 16:00:39,876 [main] ERROR BPELEngine2ExternalSerivceProcessor - 
AxisFault
 faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
 faultSubcode: 
 faultString: 
org.globus.wsrf.impl.security.authorization.exceptions.AuthorizationException: 
&quot;&lt;anonymous&gt;&quot; is not authorized to use operation: 
{http://counter.com}createCounter on this service
 faultActor: 
 faultNode: 
 faultDetail: 
        
{http://xml.apache.org/axis/}stackTrace:org.globus.wsrf.impl.security.authorization.exceptions.AuthorizationException:
 &quot;&lt;anonymous&gt;&quot; is not authorized to use operation: 
{http://counter.com}createCounter on this service
        at 
org.globus.wsrf.impl.security.authorization.ServiceAuthorizationChain.authorize(ServiceAuthorizationChain.java:301)
        at 
org.globus.wsrf.impl.security.authorization.ServiceAuthorizationChain.authorize(ServiceAuthorizationChain.java:272)
        at 
org.globus.wsrf.impl.security.authorization.ServiceAuthorizationChain.authorize(ServiceAuthorizationChain.java:235)
        at 
org.globus.wsrf.impl.security.authorization.AuthorizationHandler.invoke(AuthorizationHandler.java:177)
        at 
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
        at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
        at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
        at org.apache.axis.server.AxisServer.invoke(AxisServer.java:248)
        at 
org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:664)
        at 
org.globus.wsrf.container.ServiceThread.process(ServiceThread.java:382)
        at 
org.globus.wsrf.container.GSIServiceThread.process(GSIServiceThread.java:153)
        at org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:291)

        {http://xml.apache.org/axis/}hostname:bisgrid-globus

Reply via email to